Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: 8E1AREsvfwsFfnLrQa2bdW43/xBaD/Lq1tqJlqssCWY=
Subject key identifier: 44:16:90:34:97:B7:40:9A:C2:CE:9F:1E:C5:E0:F2:73:40:0A:A4:38
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 019847ADE36B97A974BE36A07736C6993B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0BFE
Signing time: Sat 26 Jul 2025 17:00:34 +0000
Manifest this update: Sat 26 Jul 2025 17:00:34 +0000
Manifest next update: Sun 27 Jul 2025 17:00:34 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: CRBQer4FByKFPFeDmtAfclhKjlnTPZ31Ivd9c6BUcCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:e3:6b:97:a9:74:be:36:a0:77:36:c6:99:3b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Jul 26 17:00:34 2025 GMT
Not After : Jul 27 17:00:34 2025 GMT
Subject: CN=4416903497b7409ac2ce9f1ec5e0f273400aa438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:fa:84:31:c9:ba:2b:62:f4:2c:a3:df:c0:
a0:b6:7f:65:ce:38:44:37:82:dc:cc:ea:aa:a6:4a:
e2:52:42:a4:1b:8f:5c:94:58:dc:56:d2:e2:75:6d:
bd:b1:6e:42:23:72:2a:68:51:7c:00:ed:2a:90:da:
19:94:f2:b2:09:2a:b8:9a:12:22:7b:27:e2:e3:d9:
ca:e4:42:34:94:31:51:c0:fb:10:81:58:48:fc:0c:
70:86:2a:2d:cf:e4:0f:8c:a4:16:14:f2:97:20:1e:
be:6a:d4:16:51:c1:03:ec:1b:c8:1d:7f:fc:25:a1:
c0:8f:f9:e0:08:b3:d2:45:b3:52:de:2a:4a:40:c3:
13:43:48:97:bf:2f:dd:b3:14:de:ce:70:54:12:a8:
cd:ec:f2:9b:14:2d:c1:51:f3:da:f1:b2:0b:63:c4:
a4:d4:80:c1:02:67:9a:8a:50:6a:20:f0:47:0f:0c:
1e:39:c8:53:4c:60:d2:8c:06:cf:62:79:9a:24:52:
eb:c8:17:f0:37:03:94:e4:b0:52:ce:ca:af:8d:be:
be:b5:d5:4c:58:61:97:d3:96:18:91:81:2f:b3:a5:
d1:74:5f:c0:ed:9a:d6:f6:5c:80:9f:00:ef:dd:87:
f5:82:6c:29:28:f6:88:49:75:16:ce:e4:c0:c4:3c:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:90:34:97:B7:40:9A:C2:CE:9F:1E:C5:E0:F2:73:40:0A:A4:38
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:16:87:db:c8:b0:af:c8:0c:c3:52:77:e5:52:5c:3d:70:4a:
33:0c:38:37:96:9f:7e:fa:7a:0b:b1:2a:35:74:46:a7:01:29:
1b:d8:5e:61:fe:4b:fd:d2:3e:52:99:cd:9c:67:9b:06:b5:3b:
56:f3:77:49:c3:61:02:a0:84:98:88:e2:df:5a:d2:bd:c4:66:
a6:48:99:01:91:c4:3a:09:5d:bb:6c:f4:26:f3:e8:d4:81:b0:
53:ce:1f:83:b5:79:f2:cf:0e:05:7e:c2:fe:ae:d4:a3:ff:7b:
58:18:3d:bb:5f:71:8f:d1:cc:88:40:f1:16:76:9f:56:1e:fa:
7f:e5:e2:e0:07:f0:eb:a2:dd:94:2e:30:9b:a0:d7:01:7d:f1:
72:3e:b8:ab:12:2b:0b:12:bf:81:7f:1c:6f:28:be:87:6b:8a:
91:4b:4b:9f:8b:a3:c1:80:d5:66:ee:f6:e9:3b:23:e4:68:fc:
3f:d8:fb:30:f4:5a:d5:48:f1:b7:d9:1f:93:a7:bf:60:82:fb:
28:0e:86:06:57:99:e1:d7:6d:3e:25:17:69:d4:7f:77:7e:99:
c8:19:3f:67:74:9c:2c:f1:4b:c3:5b:ce:03:9c:eb:90:9c:5d:
82:2e:86:05:d4:d4:17:da:e3:f8:43:fa:4b:6a:c3:d0:07:1a:
0f:79:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:21:22 2025 by rpki-client